spring-boot-backend

Spring Boot 3 with Java 17 provides built-in security filters and JWT libraries to authenticate REST endpoints. Configure Spring Security with JWT token validation, create login endpoints that issue tokens, and apply authentication to protected routes. This Skill scaffolds that architecture with working examples.

Yes. Add user ownership to JPA entities, enforce scoping in queries using SecurityContext or user identifiers, and validate ownership before returning data. This prevents one user from accessing another's records and is essential for multi-tenant MVPs like Photo Map.

Use layered architecture: controllers for HTTP handling, services for business logic, repositories for database queries, and DTOs for API contracts. Include validation, error handling, and transactional boundaries. This Skill provides a tested blueprint for that structure.

Use Flyway or Liquibase for versioned migrations, hash passwords with BCrypt before storage, and configure Spring Security to manage authentication. This Skill includes migration examples and secure password handling patterns for PostgreSQL backends.

Yes. Spring Boot 3 handles REST endpoints, database storage, and user authentication required for photo applications. This Skill adds EXIF processing, per-user photo isolation, and API documentation suited to constrained MVP environments.

Test controllers with MockMvc to verify endpoints, mock repositories to isolate service logic, and validate authentication and authorization flows. This Skill demonstrates those patterns for JWT-secured, user-scoped APIs.